View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 20643 | Bug reports | Security | public | 2026-08-10 12:00 | 2026-08-11 11:50 |
| Reporter | moontan | Assigned To | c_schmitz | ||
| Priority | none | Severity | minor | ||
| Status | closed | Resolution | unable to reproduce | ||
| Product Version | 7.0.x | ||||
| Summary | 20643: Users with account passwords containing special characters cannot log in. | ||||
| Description | It's possible to create user accounts with passwords containing special characters but log-in is only possible with alphanumeric passwords. I just saw that v7.0.8 is out and I am currently waiting for the upgrade to finish to see if it fixes the problem. (I don't have Comfort Update or SSH access though, so the FTP upload will still take a while) | ||||
| Steps To Reproduce | Steps to reproduceCreate two new users when logged in as admin. Make sure one user's password contains at least one special character and the other's is strictly alphanumeric. Log out and attempt to log in as the newly created users one by one. Expected resultSuccessful log-in for both users. Actual resultLog-in fails for the user with the password containing special character(s). | ||||
| Tags | access, login, password, security, users | ||||
| Bug heat | 258 | ||||
| Complete LimeSurvey version number (& build) | 7.0.7+260729 | ||||
| I will donate to the project if issue is resolved | No | ||||
| Browser | Firefox, Chrome | ||||
| Database type & version | 10.11.18-MariaDB-0+deb12u1-log | ||||
| Server OS (if known) | Debian 12 | ||||
| Webserver software & version (if known) | Linux hosting 6.1.0-50-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.176-1 (2026-07-02) x86_64 | ||||
| PHP Version | 8.2.32 | ||||
| Git branch / Pull Request URL | |||||
|
Can you provide example password that is an issue? I managed to create and then log in with an admin that has exclamation mark (!) in their password. |
|
|
I am sorry but we are unable to reproduce the issue. |
|
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2026-08-10 12:00 | moontan | New Issue | |
| 2026-08-10 12:00 | moontan | Issue Monitored: moontan | |
| 2026-08-10 12:00 | moontan | Bug heat | 250 => 252 |
| 2026-08-10 12:13 | tibor.pacalat | Note Added: 85411 | |
| 2026-08-10 12:13 | tibor.pacalat | Bug heat | 252 => 254 |
| 2026-08-10 13:55 | moontan | Tag Attached: password | |
| 2026-08-10 13:55 | moontan | Tag Attached: access | |
| 2026-08-10 13:55 | moontan | Tag Attached: login | |
| 2026-08-10 13:55 | moontan | Tag Attached: security | |
| 2026-08-10 13:55 | moontan | Tag Attached: users | |
| 2026-08-10 17:48 | c_schmitz | Assigned To | => c_schmitz |
| 2026-08-10 17:48 | c_schmitz | Status | new => feedback |
| 2026-08-10 18:31 | moontan | Bug heat | 254 => 256 |
| 2026-08-10 18:31 | moontan | Status | feedback => assigned |
| 2026-08-11 11:50 | c_schmitz | Status | assigned => closed |
| 2026-08-11 11:50 | c_schmitz | Resolution | open => unable to reproduce |
| 2026-08-11 11:50 | c_schmitz | Note Added: 85414 | |
| 2026-08-11 11:50 | c_schmitz | Bug heat | 256 => 258 |